Summary
[9.25-2.3]
- Resolves: #1744010 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744014 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744005 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744230 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | ghostscript | 0:9.25-2.el8_0.3 |
| Oracle Linux · 8 | ghostscript-doc | 0:9.25-2.el8_0.3 |
| Oracle Linux · 8 | ghostscript-tools-dvipdf | 0:9.25-2.el8_0.3 |
| Oracle Linux · 8 | ghostscript-tools-fonts | 0:9.25-2.el8_0.3 |
| Oracle Linux · 8 | ghostscript-tools-printing | 0:9.25-2.el8_0.3 |
| Oracle Linux · 8 | ghostscript-x11 | 0:9.25-2.el8_0.3 |
| Oracle Linux · 8 | libgs | 0:9.25-2.el8_0.3 |
| Oracle Linux · 8 | libgs-devel | 0:9.25-2.el8_0.3 |
Vulnerabilities 4
-
High 7.3CVE-2019-14811 Public exploit
A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not proper…
-
High 7.3
A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properl…
-
High 7.3CVE-2019-14813 EPSS 11%
A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly s…
-
High 7.3
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not pro…